$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/46C0C4E0770311F09B9D387BC4F9AE02.roa File: 46C0C4E0770311F09B9D387BC4F9AE02.roa (raw, json) Hash identifier: AbvOGF+GNkA7BKkuR93eW/OCGOb2FvpgJiFCbO4v4x4= Subject key identifier: AA:CA:2A:3E:B1:9A:13:D7:C0:0C:DB:F6:E3:7A:F3:B7:CB:46:C8:BA Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: E0 Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/46C0C4E0770311F09B9D387BC4F9AE02.roa Signing time: Sat 31 Jan 2026 06:24:38 +0000 ROA not before: Sat 31 Jan 2026 06:24:38 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133458 IP address blocks: 161.248.2.0/23 maxlen: 24 209.131.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Feb 2026 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Jan 31 06:24:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697da026-2c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:b1:12:b9:85:9e:03:b0:a4:4f:15:b5:60: 65:e3:b7:ef:3b:47:65:66:15:a2:a4:3f:ed:61:41: d5:a1:02:e3:8d:68:8e:f0:f0:a3:6f:d4:24:88:f2: aa:b7:4d:98:ad:15:c0:61:56:8a:35:d7:e4:72:f0: 4a:d2:47:d5:3d:ce:45:6d:07:30:51:73:83:85:7a: bf:7a:b4:20:e3:8d:fe:76:58:ec:3e:2b:e4:ec:c9: 4b:5f:41:98:5a:d2:38:82:09:5e:db:f2:8d:64:68: e4:5a:c8:6e:9e:89:5a:b8:6c:02:c7:f0:bd:a5:25: 64:07:be:7d:e6:2d:b7:b1:36:a1:e1:20:4d:77:92: 20:c1:be:0a:bd:c7:0c:26:b2:40:ce:4d:e1:46:9d: f7:99:60:1e:a2:b4:ee:55:d8:7e:b2:cd:56:94:ef: b8:3c:30:70:10:49:6b:fc:0a:57:30:a6:8d:0f:e9: 23:63:74:be:78:f5:8a:c0:5c:d2:c3:08:5e:9b:7d: a5:da:6b:79:a9:9f:13:54:c5:2e:9b:3b:90:98:91: cf:2c:a3:d2:f6:72:21:2b:41:ef:7c:d2:99:7c:1f: c1:30:c0:b1:b4:a8:f7:e9:2d:5c:24:8e:db:96:72: d4:5e:8f:37:f7:20:42:59:ba:23:1a:c7:7a:42:ff: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CA:2A:3E:B1:9A:13:D7:C0:0C:DB:F6:E3:7A:F3:B7:CB:46:C8:BA X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/46C0C4E0770311F09B9D387BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.2.0/23 209.131.124.0/23 Signature Algorithm: sha256WithRSAEncryption 38:5f:87:6e:c7:b8:73:9d:db:59:5d:33:24:d8:b6:b8:24:f9: 17:25:4c:89:d2:49:e3:98:3c:0c:b8:a9:0c:21:65:5b:dc:90: 2a:26:2d:f5:58:0e:88:da:02:1d:4f:23:24:62:df:75:65:e7: 5e:46:0b:1e:d3:e7:a2:83:8c:f4:3c:b7:a4:9e:d6:b0:c5:21: 14:4e:62:3f:2c:a4:0d:6f:71:be:af:77:4b:6c:62:64:ef:ea: 94:0a:ec:c2:b8:77:56:31:62:37:f3:9a:a2:45:43:52:42:88: 24:3f:24:c8:f0:fc:b8:30:93:89:cf:e1:c8:bb:50:b1:69:a4: da:85:69:ec:76:5d:89:59:db:ab:ab:23:f7:b3:4f:88:a1:72: a4:b5:29:c3:30:88:c1:b2:08:61:69:92:f6:f6:9b:42:14:46: f9:5a:65:f9:41:01:27:13:6e:03:7a:01:42:1e:48:a3:eb:23: 19:ee:05:25:c3:cb:9a:50:f4:a1:f5:dd:10:a0:b8:20:1f:be: 2f:c1:68:a4:21:56:1c:b6:ef:30:38:61:48:25:63:f7:07:ca: 28:29:73:85:d4:61:f8:9d:65:d6:bc:df:36:44:2a:e7:53:1d: fb:ea:66:ce:fc:04:77:8c:28:31:5a:e7:df:33:3f:7b:e2:95: a5:dc:29:0d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx N0M5MDkxMTAvBgNVBAUTKDU5RjlENDhERDkxNjkwOTc4M0UzMTc3MUQ4QUQ3RUNC MzBEQzNCQTIwHhcNMjYwMTMxMDYyNDM4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdkYTAyNi0yYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMKxErmFngOwpE8VtWBl47fvO0dlZhWipD/tYUHVoQLjjWiO8PCjb9QkiPKq t02YrRXAYVaKNdfkcvBK0kfVPc5FbQcwUXODhXq/erQg443+dljsPivk7MlLX0GY WtI4ggle2/KNZGjkWshunolauGwCx/C9pSVkB7595i23sTah4SBNd5Igwb4KvccM JrJAzk3hRp33mWAeorTuVdh+ss1WlO+4PDBwEElr/ApXMKaND+kjY3S+ePWKwFzS wwhem32l2mt5qZ8TVMUumzuQmJHPLKPS9nIhK0HvfNKZfB/BMMCxtKj36S1cJI7b lnLUXo839yBCWbojGsd6Qv8+YQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKrKKj6x mhPXwAzb9uN687fLRsi6MB8GA1UdIwQYMBaAFFn51I3ZFpCXg+MXcditfssw3Dui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS9GRjdDNUZEQ0Mw REIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tKZUQ0eGR4MksxLXl6RGNP NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M5MDkvRkY3QzVGRENDMERCMTFFRjlFODcxODQ0QzRGOUFFMDIvNDZDMEM0RTA3 NzAzMTFGMDlCOUQzODdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGh+AIDBAHRg3wwDQYJKoZIhvcNAQELBQADggEBADhfh27H uHOd21ldMyTYtrgk+RclTInSSeOYPAy4qQwhZVvckComLfVYDojaAh1PIyRi33Vl 515GCx7T56KDjPQ8t6Se1rDFIRROYj8spA1vcb6vd0tsYmTv6pQK7MK4d1YxYjfz mqJFQ1JCiCQ/JMjw/Lgwk4nP4ci7ULFppNqFaex2XYlZ26urI/ezT4ihcqS1KcMw iMGyCGFpkvb2m0IURvlaZflBAScTbgN6AUIeSKPrIxnuBSXDy5pQ9KH13RCguCAf vi/BaKQhVhy27zA4YUglY/cHyigpc4XUYfidZda83zZEKudTHfvqZs78BHeMKDFa 598zP3vilaXcKQ0= -----END CERTIFICATE-----Generated at Sat Feb 21 01:03:16 2026 by rpki-client